Home / server / Questions / 52586
In Process
niXar
Asked: 2009-08-11 23:49:41 +0800 CST

Extracting the machine account domain password from the registry

  • 772

If I understand correctly, to join a Windows domain, a machine needs to have an account on Active Directory, and have the password to authenticate. Such a password is renewed automatically every 30 days.

Now, I have a Linux machine on the corporate network, with the IT dept's blessing, and Samba can join a domain and would allow me to do so, but they don't want to add it. I want to use the account I have on a Windows machine I'm going to reformat anyway. I couldn't find a way to decode the key stored in the registry.

active-directory samba

3 Answers

  1. It is possible to dump the hashes from a Windows system and import them into Samba. The process is explained here http://ppp.samba.org/samba/ftp/pwdump/README. However do consider the IT department might not be happy with you doing such things and there is no guarante that it will work for what your trying to do.

    • 2

  2. Hopefully the IT group is as respectful about you as you are about them (sarcasm intended). What does it benefit you to disparage and insult them? Does it make you a better developer? Does it make your boss respect you more? Does it make you a better person? No? Then why do it? There's no glory and certainly no honor in bashing someone else's abilities.

    • 1

  3. Question: Why would you need to join a Windows domain?

    At work, I use Linux only. The entire infrastructure is Windows. I mount Windows shares without problems:

    mount -t smbfs "//fileserver/sharename" /mnt/mntpoint/ \
-o credentials=filename,uid=...,gid=...,fmask=0755,dmask=0755

    The credentials file looks like:

    username=DOMAIN/username
password=mywindowspassword

    I have a simple script I run after logging in that mounts all the shares I need (I run it manually, since I am not always on the company network). Whenever I need to change the domain password, I just edit the credentials file. I usually find out that my password is expired when the shares stop working. I then borrow a colleague's Windows computer and log in using that. Windows prompts me to change the password.

    I am not sure if what you ask makes sense for a Linux computer. What would joining a Windows domain mean for a Linux box?

    Edit:

    I get it. Your Linux box is a SMB file server? And you want to make it available for the Windows users?

    • 1